Epic Games Easy Anti-Cheat 4.0 Local Privilege Escalation via Unquoted Service Path (ZSL-2021-5652)

Vulnerability Information Summary Vulnerability Details Title: Epic Games Easy Anti-Cheat 4.0 Local Privilege Escalation Advisory ID: ZSL-2021-5652 Type: Local Impact: Privilege Escalation Risk: (2/5) Release Date: 06.05.2021 Abstract Epic Anti-Cheat is a leading anti-cheat service in the industry, combating hackers and cheaters in multiplayer PC games using a hybrid anti-cheat mechanism. Description The application is affected by an unquoted search path issue impacting the 'EasyAntiCheat' service, which is deployed as part of Windows. This could allow an authorized local user to execute arbitrary code with system privileges. Plugins or other security applications that are not detected in the system root path may be executed during application startup or restart. Vendor Information Vendor: Epic Games, Inc. - https://www.epicgames.com / https://www.easy.ac Affected Versions 4.0.0.0 Test Environment Microsoft Windows 10 Vendor Status N/A Proof of Concept .easyanticheat_eop.txt Acknowledgments This vulnerability was discovered by Gjoko Krstic - References [1] https://cxsecurity.com/issue/WLB-2021050040 [2] https://www.exploit-db.com/49841 [3] https://packetstormsecurity.com/files/162503/ [4] https://exchange.xforce.ibmcloud.com/vulnerabilities/201455 Change Log [06.05.2021] - Initial release [19.06.2021] - Added references [1], [2], [3], and [4] Contact Zero Science Lab Website: https://www.zeroscience.mk Email: lab@zeroscience.mk

Goal Reached Thanks to every supporter — we hit 100%!

Epic Games Easy Anti-Cheat 4.0 Local Privilege Escalation via Unquoted Service Path (ZSL-2021-5652)